CVE-2009-4826

2010-04-2715:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of administrators for requests that alter administrative settings via a cp action.

References

secunia.com/advisories/37721

www.exploit-db.com/exploits/10444

www.vupen.com/english/advisories/2009/3525